Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Network SecurityHard
A large organization is migrating its on-premises data center to a public cloud provider. The security team is concerned about maintaining visibility and control over network traffic within the cloud environment. Traditional perimeter-based firewalls are less effective for east-west traffic between virtual machines in the same cloud subnet. Which cloud-native security concept is crucial for securing this internal cloud traffic?
- AMicrosegmentation
- BContent Delivery Networks (CDNs)
- CHardware Security Modules (HSMs)
- DVirtual Private Cloud (VPC) peering
Show answer & explanationAnswer & explanation
Correct answer: A. Microsegmentation
Microsegmentation is crucial for securing east-west traffic within a cloud environment. It allows for granular security policies to be applied to individual workloads or applications, isolating them from each other even within the same subnet, thus preventing lateral movement of threats.
Why the other options are wrong
- B. CDNs optimize content delivery, they are not a cloud network security concept for internal traffic.
- C. HSMs protect cryptographic keys, not network traffic flow.
- D. VPC peering connects different VPCs, it doesn't secure internal traffic within a single VPC subnet.
Microsegmentation
A network security technique that divides an organization's data center or cloud network into distinct, isolated segments down to the individual workload level.
- Applies granular security policies between workloads.
- Restricts lateral movement of threats (east-west traffic).
- Improves security posture in virtualized and cloud environments.
Memory trick: In the cloud, build tiny fences around every sheep, not just a big one around the field.